$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5C0C0165C2202336BADFB9247E38D0C985467004.cer File: 5C0C0165C2202336BADFB9247E38D0C985467004.cer (raw, json) Hash identifier: Z2q2Sn7/9kbF6bSiOA0wfoyjJpnUwse68JXenimdTHs= Subject key identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 18DE52354AF50791DA9966CA55CA291E21D45C5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:45 +0000 Certificate not after: Sun 02 May 2027 00:26:45 +0000 Subordinate resources: IP: 103.239.214.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:de:52:35:4a:f5:07:91:da:99:66:ca:55:ca:29:1e:21:d4:5c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:21:45 2026 GMT Not After : May 2 00:26:45 2027 GMT Subject: CN=5C0C0165C2202336BADFB9247E38D0C985467004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:f4:9b:38:bb:6f:b3:24:b4:28:d8:fc:c5: a1:dc:22:61:9d:1d:d5:ef:ea:3a:2e:98:c7:a0:62: 9d:d6:c2:8f:84:22:53:dc:76:63:85:d6:e0:bb:9b: da:54:ce:04:7f:8c:7a:2b:e4:f4:90:a1:dc:46:f9: be:e3:4d:7d:74:d1:b2:09:e4:5c:b3:56:1e:9d:82: d5:1b:d2:b6:06:b9:21:13:48:3b:db:56:10:86:c8: 7b:ce:1e:be:0c:7d:7b:35:3e:a6:c4:cf:d8:ce:c6: 0b:29:3e:3f:17:5a:51:a0:96:a4:ad:9c:6e:26:9a: c2:fa:d0:a9:95:cb:c5:a4:64:12:14:6a:ff:1e:3c: 12:7c:85:fd:4a:d5:49:c6:fd:43:f1:ad:15:d2:bd: 2f:df:b7:57:6b:e1:e1:cc:ed:c0:91:9c:b3:e2:ba: 43:c6:ef:f6:92:b1:22:df:1a:a1:45:ad:73:f2:4d: 5e:c7:44:0b:56:1b:93:b0:f1:77:de:d1:bf:34:e1: 39:a5:f2:ba:2f:f6:86:a1:4c:cf:9b:56:05:18:be: 76:4f:a6:ce:97:0e:4a:d6:4c:3c:7f:60:d2:5a:9c: 11:ca:3d:80:b2:c4:a4:b2:aa:ca:67:e3:65:d0:7a: db:a5:80:fb:95:a8:ba:22:0b:ed:a0:c6:43:b4:fc: 92:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:0C:01:65:C2:20:23:36:BA:DF:B9:24:7E:38:D0:C9:85:46:70:04 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/5C0C0165C2202336BADFB9247E38D0C985467004.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.214.0/23 Signature Algorithm: sha256WithRSAEncryption 28:5e:5f:d3:35:00:97:4e:68:e0:00:8e:15:f6:ec:cd:4c:18: 5f:03:e8:db:c6:d4:c6:63:a8:d3:2e:89:02:3c:64:7b:92:3e: f2:09:a9:38:c0:3d:37:f9:e0:44:83:6f:80:5b:2c:93:4c:ac: 67:e0:f1:6a:42:cb:ce:00:3c:b9:fb:a3:ab:e0:68:96:c4:c0: 31:5c:9b:c5:cc:21:5b:43:9b:c5:09:1c:95:a5:6e:6a:8f:15: bc:ba:50:00:47:79:50:d9:b5:c1:51:79:28:25:24:95:b6:bb: eb:b9:61:fa:cb:77:8d:87:a9:c0:03:08:92:66:5e:27:0c:2c: e6:d6:89:1d:18:cb:36:6e:b6:4a:ad:64:6d:1a:48:fc:d7:38: 4d:f2:54:0c:e8:38:13:3a:d3:87:3d:5e:bb:d8:5d:e3:de:5a: e1:cf:5c:af:45:d4:46:47:c3:8a:85:23:0c:34:a0:90:c6:6e: d2:b4:16:c5:07:30:3b:12:8d:44:19:e8:84:d4:74:75:21:33: f5:f8:be:b7:89:8b:fb:b6:02:c1:22:8d:ab:7b:7e:b8:be:0f: ad:3d:fa:53:0b:88:40:ce:c7:83:99:eb:72:f2:da:fd:91:f5: 74:21:e0:ec:a9:db:6d:e0:bc:df:30:77:75:1c:e2:e7:d3:36: 2c:31:e3:50 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGN5SNUr1B5HamWbKVcopHiHUXFwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjE0NVoX DTI3MDUwMjAwMjY0NVowMzExMC8GA1UEAxMoNUMwQzAxNjVDMjIwMjMzNkJBREZC OTI0N0UzOEQwQzk4NTQ2NzAwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4Q9Js4u2+zJLQo2PzFodwiYZ0d1e/qOi6Yx6BindbCj4QiU9x2Y4XW4Lub 2lTOBH+Meivk9JCh3Eb5vuNNfXTRsgnkXLNWHp2C1RvStga5IRNIO9tWEIbIe84e vgx9ezU+psTP2M7GCyk+PxdaUaCWpK2cbiaawvrQqZXLxaRkEhRq/x48EnyF/UrV Scb9Q/GtFdK9L9+3V2vh4cztwJGcs+K6Q8bv9pKxIt8aoUWtc/JNXsdEC1Ybk7Dx d97RvzThOaXyui/2hqFMz5tWBRi+dk+mzpcOStZMPH9g0lqcEco9gLLEpLKqymfj ZdB626WA+5WouiIL7aDGQ7T8kuMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFwMAWXCICM2ut+5JH440MmFRnAEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNlNTE2ZTZlLWM2NzktNGU1MC1iN2FiLTFlNDA2NzkxMjVjZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZTUxNmU2 ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC81QzBDMDE2NUMyMjAyMzM2 QkFERkI5MjQ3RTM4RDBDOTg1NDY3MDA0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+/WMA0GCSqGSIb3DQEBCwUAA4IBAQAoXl/TNQCXTmjgAI4V9uzNTBhfA+jb xtTGY6jTLokCPGR7kj7yCak4wD03+eBEg2+AWyyTTKxn4PFqQsvOADy5+6Or4GiW xMAxXJvFzCFbQ5vFCRyVpW5qjxW8ulAAR3lQ2bXBUXkoJSSVtrvruWH6y3eNh6nA AwiSZl4nDCzm1okdGMs2brZKrWRtGkj81zhN8lQM6DgTOtOHPV672F3j3lrhz1yv RdRGR8OKhSMMNKCQxm7StBbFBzA7Eo1EGeiE1HR1ITP1+L63iYv7tgLBIo2re364 vg+tPfpTC4hAzseDmety8tr9kfV0IeDsqdtt4LzfMHd1HOLn0zYsMeNQ -----END CERTIFICATE-----Generated at Tue May 12 22:02:51 2026 by rpki-client